Which configuration files are used to transform raw data ingested by Splunk? (Choose all that apply.)
A Splunk administrator has been tasked with developing a retention strategy to have frequently accessed data sets on SSD storage and to have older, less frequently accessed data on slower NAS storage. They have set a mount point for the NAS. Which parameter do they need to modify to set the path for the older, less frequently accessed data in indexes.conf?
Which parent directory contains the configuration files in Splunk?
A configuration file in a deployed app needs to be directly edited. Which steps would ensure a successful deployment to clients?